The default arrangement of columns on the Processes tab does not include the Pro¬cess Identifier (PID) column. This column is shown on the Services tab, where it’s extremely useful in enabling you to see which processes are running as part of the same Svchost.exe instance.

However, for detailed troubleshooting and performance analysis, we recommend that you display the Pro¬cess ID column on the Processes tab. To find out what’s inside a particularly busy Svchost process, make a note of its PID and then switch to the Ser¬vices tab and sort by the PID column. The associated services will appear in a block using that PID.